Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e53bbc86-bd8f-360c-8218-04fa628fc283.roa
File:                     e53bbc86-bd8f-360c-8218-04fa628fc283.roa (raw, json)
Hash identifier:          52t5K5Ha+H9uBoZ8a48nUUTL8LR+5IZ7ZnhP4WvPVUg=
Subject key identifier:   50:91:14:56:5C:7B:0E:50:61:22:37:01:D9:DD:EA:33:A3:56:58:EA
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584F4989EF536C4AF06B9511E580
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e53bbc86-bd8f-360c-8218-04fa628fc283.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        137.75.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:ef:53:6c:4a:f0:6b:95:11:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9b606f94-d28f-4c92-810a-7c0586b25629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9c:71:8d:ce:bb:13:eb:fd:0d:c2:20:93:fc:
                    81:d7:5f:79:64:35:80:8a:5b:85:92:ec:40:f8:aa:
                    b3:a6:fb:70:bb:10:49:bb:62:26:bb:e7:9f:41:65:
                    e6:d7:1d:67:42:ea:a4:35:57:af:97:0f:9e:c4:90:
                    21:ca:4b:5e:59:31:b7:87:77:f9:34:5e:cd:69:f9:
                    98:3c:d1:9f:78:21:50:d0:41:38:31:2c:b0:46:96:
                    fa:e6:9d:80:b7:b0:e0:eb:36:d1:ec:cb:ac:19:59:
                    fd:a7:35:d6:98:9b:1a:2b:5d:68:5b:83:12:cb:96:
                    99:e3:8a:21:b5:ff:7c:7d:4b:d1:ae:e8:e7:fd:bf:
                    b5:0f:4c:e3:52:ed:ae:37:99:8d:8f:da:9e:18:b6:
                    fb:56:25:54:f4:6f:0c:16:ca:61:f6:3c:06:43:84:
                    32:45:c9:b2:00:ac:82:ae:68:9a:bb:e2:70:e9:f7:
                    4b:fb:68:a7:8b:58:1f:f6:36:4f:83:ec:30:e9:b4:
                    fe:a2:61:4e:ec:e4:1c:28:d7:bb:6c:08:f7:ac:99:
                    87:f9:66:b1:06:2e:41:e3:e9:65:cf:73:5d:44:4a:
                    1e:35:7a:99:bb:21:d9:1a:d4:16:13:fd:d9:90:2e:
                    14:bb:4d:01:60:c5:ed:0d:42:1e:9d:b8:3d:42:68:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:91:14:56:5C:7B:0E:50:61:22:37:01:D9:DD:EA:33:A3:56:58:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e53bbc86-bd8f-360c-8218-04fa628fc283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:54:77:20:ee:95:3e:e2:83:83:12:02:82:03:ac:b7:ec:43:
         96:aa:6f:48:dc:48:8f:34:2c:6b:ca:60:5f:7f:c7:89:0c:80:
         c7:ae:ee:f8:a2:29:db:01:e9:00:a2:42:db:5b:bb:17:3c:b8:
         25:d0:40:17:f1:32:97:64:c8:5f:53:19:d8:76:d1:b1:d7:fe:
         ce:6b:fa:6a:02:16:2f:ec:8f:2a:d9:e5:d0:99:69:c0:c2:f9:
         83:20:88:11:3b:2d:5e:41:51:54:ed:f4:94:5d:bf:4a:c3:42:
         93:54:b0:ff:bb:f2:19:0c:e8:45:e6:ef:a8:f4:a1:34:5d:3a:
         7a:66:9b:bf:48:b4:77:79:3a:97:98:f5:f5:46:81:48:5e:e6:
         4d:50:3e:93:1c:cf:af:c3:5a:66:d1:8b:7d:02:c8:b9:e3:f1:
         16:ae:73:6b:51:14:57:7e:5b:aa:7e:c0:76:5e:70:c4:31:05:
         bc:7e:fa:c7:ef:bf:64:9a:4c:18:f8:c6:35:88:c3:78:0f:e3:
         7a:8a:bf:ba:3f:73:1c:d4:ef:72:78:3b:b2:58:a5:69:62:bd:
         9d:f9:9e:9d:25:97:d3:78:8c:4b:57:74:c0:06:3f:20:e0:a0:
         a7:6b:30:ce:36:9e:57:02:d3:85:f1:82:7b:87:ff:1d:95:cb:
         b5:64:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:50:40 2026 by rpki-client